Which Empire module category includes scanning the network for additional hosts, ports, shares, and more?

• A. Recon
• B. Management
• C. Situational Awareness
• D. Exfiltration

Answer: (C)

Gleaning the current environment after gaining access is the focus here. In Empire, modules are organized by what they help you do once you’re inside a system, and the category that covers building a live picture of the network—finding additional hosts, open ports, shares, services, and other reachable resources—is Situational Awareness. These modules continuously map the compromised environment so you can plan next steps, identify pivot points, and understand what you can exploit or access next.

This fits best because the goal is to understand the surrounding landscape from within the target network, not just gather high-level information before access (Recon), not primarily move data out (Exfiltration), and not handle administrative control tasks (Management).